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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1. (currently amended) A system for managing administration of computer services 
provided to users comprising: 

a computer system; 

an operating system running on the computer system; 

a plurality of Virtual Private Servers (VPSs) running on the computer system, wherein 
the VPSs are isolated from each other by a logical isolation of processes; 

a plurality of server processes running on the computer system, each server process 
running within its own VPS, wherein the server processes provide services to a plurality of 
remote users; and 

at least one designated Virtual Private Server (VPS) with a set of services that perform 
administrative operations, wherein the designated VPS provides administrative services to each 
of the server processes running in other VPSs and wherein the designated VPS is isolated by a 
logical isolation of processes . 

2. (original) The system of claim 1, wherein the server process is any of a file 
server, an authentication server, a chroot environment server, a jail environment, a print server, a 
POP3 server, an IMAP/EVIAP4 server, an SMTP server, a scheduler server, a 
COM/COM+/DCOM server, a cryptographies server, a browser server, a DHCP server, a 
distributed file system server, a Distributed Link tracking server, an event log server, a reporting 
server, a file replicator server, an indexing server, a firewall server, a Kerberos server, an IPSEC 
server, a logon server, a Network DDE server, an NLA server, a performance logs and alerts 
server, a plug and play server, a print spooler server, a protected storage server, a disk encryption 
server, a routing server, a remote access server, a system event notification server, a telnet server, 
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an uninterruptible power supply server, a Windows Management Instrumentation (WMI) server, 
a wireless configuration server, a WMI performance adaptor server, a data base server, a network 
address translation server, an IRC server, an inetd server, a volume shadow copy server, a boot 
and remote boot server, a finger server, a who server, a rexec server, a webster server, a 
conference server, a zip server, an afbackup server, an ASP server, and a fido server. 

3. (original) The system of claim 1, wherein the server process is any of an FTP 
server, a sand box environment server, a chat server, an X windows server, a secure shell (SSH) 
server, and a socks server. 

4. (original) The system of claim 1 . wherein the server process is a webserver. 

5. (original) The system of claim 1, wherein the server process is any of a file 
server, a VPS, a Windows Terminal Service, a domain name server, an SSL server, an instant 
messaging server, a message write server, a security account manager server, a telephony server, 
a virtual disk server, a Windows installer server, a radius server, and a backup server. 

6. (original) The system of claim 1, wherein the server process includes any of a 
WAP server, Plesk server™, a Virtuozzo™ server, a Virtuozzo for Windows™ server, a 
wireless access server, a wireless router and a wireless access point. 

7. (original) The system of claim 1, wherein the administrative operations include 

any of: 

collection of statistics relating to the server process; 
servicing of requests for management of the server process; 
servicing of requests for management of operating system functions; 
servicing of requests for computer system resource allocation; 
servicing of requests for computer system resource re-allocation; 
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servicing of requests for authorization within the operating system; 

servicing of requests for authorization within the server process; 

servicing of requests that the server process is forbidden from executing; 

servicing of requests that the server process cannot execute; 

servicing of operations that potentially can cause a fault in the server process; 

servicing of operations that require multiplexing of server processes; 

data backup and restore operations, update and patch installation; 

checking permissions for operations; 

security-related analysis and operations; 

audit of operations; 

application installation and configuration; 

network and other OS and application parameter configuration; 

driver installation and upgrade; 

spam filter operation; 

firewall installation and configuration; 

creation and deletion of users; 

creation and deletion of groups; 

license-related management; and 

remote access management. 

8. (original) The system of claim 7, wherein the multiplexing is performed using 
separation of requests based on a different network protocol address. 

9. (original) The system of claim 7, wherein the multiplexing is performed using 
separation of requests based on a content of a request directed to the server process. 

10. (previously presented) The system of claim 1, wherein the administrative 
services include any of: 
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servicing of requests for authorization within the operating system; 

servicing of requests for authorization within the server process; 

creation and deletion of users; 

creation and deletion of groups; 

license-related management; 

remote access management; and 

security-related analysis and operations. 

11. (previously presented) The system of claim 1, wherein the administrative 
services include any of: 

servicing of requests that the server process is forbidden from executing; 

servicing of requests that the server process cannot execute; and 

servicing of operations that potentially can cause a fault in the server process. 

12. (previously presented) The system of claim 1, wherein the administrative 
services include application installation and configuration. 

13. (previously presented) The system of claim 1, wherein the administrative 
services include data backup and restore operations. 

14. (previously presented) The system of claim 1, wherein VPS isolation comprises 
any of , physical isolation of processes, namespace isolation, data isolation, address isolation, 
fault isolation and performance isolation. 

15. (original) The system of claim 1, wherein VPS isolation includes resource 
isolation. 

16. (previously presented) The system of claim 1, wherein the administrative 
services include any of servicing of VPS migration requests; 
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servicing of processes migration requests; and 
servicing of requests for computer system resources. 

17. (currently amended) A system for managing administration of computer services 
provided to users comprising: 

a computer system; 

an operating system running on the computer system; 

a plurality of Virtual Private Servers (VPSs) running on the computer system, wherein 
the VPSs are isolated from each other by a physical isolation of processes; 

a plurality of server processes running on the computer system that provide services to a 
plurality of remote users , each server process running within its own VPS ; and 

a plurality of designated Virtual Private Servers (VPSs), wherein each of the designated 
VPSs provides administrative services to each of the server processes running in other VPSs and 
wherein each designated VPS is isolated by a physical isolation of processes . 

18. (original) The system of claim 17, wherein the server processes include any of a 
file server, an authentication server, a chroot environment server, a jail environment, a print 
server, a POP3 server, an IMAP/IMAP4 server, a SMTP server, a scheduler server, a 
COM/COM+/DCOM server, a cryptographies server, a browser server, a DHCP server, a 
distributed file system server, a Distributed Link tracking server, an event log server, a reporting 
server, a file replicator server, an indexing server, a firewall server, a Kerberos server, an IPSEC 
server, a logon server, a Network DDE server, an NLA server, a logs and alerts server, a plug 
and play server, a print spooler server, a protected storage server, a disk encryption server, a 
routing server, a remote access server, a system event notification server, a telnet server, an 
uninterruptible power supply server, a Windows Management Instrumentation (WMI) wireless 
configuration server, a WMI performance adaptor server, a data base server, a network address 
translation server, an IRC server, an inetd server, a volume shadow copy server, a boot and 
remote boot server, a finger server, a who server, a rexec server, a webster server, a conference 
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server, a zip server, an afbackup server, an ASP server, a fido server, WAP servers, Plesk 
server™, Virtuozzo™ servers, Virtuozzo for Windows™ servers, wireless access servers, 
wireless routers and wireless access points. 

19. (original) The system of claim 17, wherein the server process is any of an FTP 
server, a sand box environment server, a chat server, an X windows server, a secure shell (SSH) 
server, and a socks server. 

20. (original) The system of claim 17, wherein the server process is a webserver. 

21. (original) The system of claim 17, wherein the server process is any of a file 
server, a VPS, a Windows Terminal Service, a domain name server, an SSL server, an instant 
messaging server, a message write server, a security account manager server, a telephony server, 
a virtual disk server, a Windows installer server, a radius server, and a backup server. 

22. (previously presented) The system of claim 17, wherein the administrative 
services include any of: 

collection of statistics relating to the server process; 
servicing of requests for management of the server process; 
servicing of requests for management of operating system functions; 
servicing of requests for computer system resource allocation; 
servicing of requests for computer system resource re-allocation; 
servicing of operations that require multiplexing of server processes; 
data backup and restore operations, update installation; 
security-related analysis and operations; 
audit of operations; 

network and other OS and application parameter configuration; 
driver installation and upgrade; 
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spam filter operation; and 

firewall installation and configuration. 

23. (original) The system of claim 22, wherein the multiplexing is based on a 
network protocol addressing. 

24. (original) The system of claim 22, wherein the multiplexing is based on a content 
of a request directed to the server process. 

25. (previously presented) The system of claim 17, wherein the administrative 
services include any of: 

servicing of requests for authorization within the operating system; 
servicing of requests for authorization within the server process; 
checking permissions for operations; 
creation and deletion of users; 
creation and deletion of groups; 
license-related management; 
remote access management; and 
security-related analysis and operations. 

26. (previously presented) The system of claim 17, wherein the administrative 
services include any of: 

servicing of requests that the server process is forbidden from executing; and 
servicing of operations that potentially can cause a fault in the server process. 

27. (previously presented) The system of claim 17, wherein the administrative 
services include application installation and configuration. 
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28. (previously presented) The system of claim 17, wherein the administrative 
services include data backup and restore operations. 

29. (previously presented) The system of claim 17, wherein VPS isolation further 
comprises any of logical isolation of processes, namespace isolation, data isolation, address 
isolation, fault isolation and performance isolation. 

30. (original) The system of claim 17, wherein VPS isolation includes resource 
isolation. 

31. (currently amended) The system of claim 17, wherein the administrative services 
include any of: 

servicing of VPS migration requests; 
servicing of processes migration requests; and 
servicing of requests for computer system resources. 

32. (currently amended) A system for managing computer services provided to users 
comprising: 

a computer system; 

an operating system running on the computer system; 

a plurality of Virtual Private Servers (VPSs) running on the computer system, wherein 
the VPSs are isolated from each other by a namespace isolation of processes; 

a plurality of server processes running on the computer system , each server process 
running within its own VPS , wherein the server processes provide services to a plurality of 
remote users; and 

at least one designated Virtual Private Server (VPS) that instantiates and terminates the 
server processes running in other VPSs in response to user requests for the service , wherein the 
designated VPS is isolated by a namespace isolation of processes . 
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33. (original) The system of claim 32, wherein the server processes include any of a 
webserver, a file server, an FTP server, an authentication server, a VPS, a chroot environment 
server, a jail environment, a sand box environment server, a print server and a Windows 
Terminal Service, a POP3 server, an IMAP/IMAP4 server, a SMTP server, a scheduler server, a 
COM/COM+/DCOM server, a cryptographies server, a browser server, a DHCP server, a 
Distributed file system server, a Distributed Link tracking server, an event log server, a reporting 
server, a DNS server, a file replicator server, an SSL server, an indexing server, a firewall server, 
a Kerberos server, an IPSEC server, an instant messaging server, a message write server, a logon 
server, a Network DDE server, an NLA server, a performance logs and alerts server, a plug and 
play server, a print spooler server, a protected storage server, a disk encryption server, a routing 
server, a remote access server, a security account manager server, a system event notification 
server, a telnet server, a telephony server, an uninterruptible power supply server, a virtual disk 
server, a Windows installer server, a Windows management instrumentation wireless 
configuration server, a WMI performance adaptor server, a data base server, a Network address 
translation server, an IRC server, a chat server, an X windows server, an inetd server, a volume 
shadow copy server, a boot and remote boot server, a finger server, a secure shell (SSH) server, a 
who server, a rexec server, a webster server, a conference server, a radius server, a zip server, a 
socks server, an afbackup server, a backup server, an ASP server, a fido server, a WAP server, 
Plesk server™, a Virtuozzo™ server, a Virtuozzo for Windows™ server, a wireless access 
server, a wireless router and a wireless access point. 

34. (previously presented) The system of claim 32, wherein the instantiation is based 
on a network protocol addressing the user requests. 

35. (original) The system of claim 32, wherein the instantiation is based on a content 
of the user requests. 



Atty. Dkt. No. 2230.0050000/MBR/GSB 



- 12- 



BELOUSSOV et al. 
Appl. No. 10/826,280 



36. (canceled) 

37. (withdrawn) A method for managing computer services provided to users 
comprising: 

receiving a request for service from a user; 
determining an addressee process of the request; 

determining if the addressee process has been instantiated and launched; 
instantiating and launching the addressee process if the addressee process has not been 
instantiated and launched; 

generating a response to the request; and 
sending the response to the user. 

38. (withdrawn) The method of claim 37, wherein the addressee is identified based 
on a network protocol addressing of the request. 

39. (withdrawn) The method of claim 37, wherein the addressee is identified based 
on a content of the request. 

40. (withdrawn) The method of claim 37, further including terminating the addressee 
process. 

41. (withdrawn) A computer program product for managing computer services 
provided to users, the computer program product comprising a computer useable medium having 
computer program logic recorded thereon for controlling at least one processor, the computer 
program logic comprising: 

computer program code means for receiving a request for service from a user; 
computer program code means for determining an addressee process of the request; 
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computer program code means for determining if the addressee process has been 
instantiated and launched; 

computer program code means for instantiating and launching the addressee process if 
the addressee process has not been instantiated and launched; 

computer program code means for generating a response to the request; and 

computer program code means for sending the response to the user. 

42. (withdrawn) The computer program product of claim 41, wherein the addressee 
is identified based on a network protocol addressing of the request. 

43. (withdrawn) The computer program product of claim 41, wherein the addressee 
is identified based on a content of the request. 

44. (withdrawn) The computer program product of claim 41, further including 
computer program code means for terminating the addressee process. 

45. (withdrawn) A system for managing security of a computer environment 
comprising: 

a server; 

an operating system running on the server; 

a first Virtual Machine running on the server and dedicated to security functions; and 

a plurality of other Virtual Machines running on the computer and providing application 

services to users, wherein the first Virtual Machine implements security functions for the other 

Virtual Machines. 

46. (withdrawn) The system of claim 45, wherein the security functions include any 
of anti-spam, firewall, network security and content filtering. 
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